Plugin4Shell – Zero Click RCE Vulnerability found in top four coding agents

Written and edited by the WorldPing NewsdeskPublished Updated Original reporting: Hacker News

What happened

Article URL: https://www.air.security/blog-posts/plugin4shell Comments URL: https://news.ycombinator.com/item?id=49745809 Points: 7 # Comments: 2…

Key facts

  • Article URL: https://www.air.security/blog-posts/plugin4shell Comments URL: https://news.ycombinator.com/item?id=49745809 Points: 7 # Comments: 2…
  • Reported by Hacker News and published Thu, 17 Sep 2026 20:05:31 UTC.

Why it matters

Platform, chip and AI decisions set the terms other companies have to build on, so a single announcement here tends to ripple through products, supply chains and regulation.

What to watch next

  • Availability, pricing and rollout regions
  • Independent testing or verification of the claims made
  • Responses from regulators and competing platforms

Coverage timeline

When each newsroom published on this story, oldest first — all times UTC.

  1. Launch HN: Skillsync (YC W26) – AI chat sessions made portable across agents

  2. Claude Code relaunches Projects to manage multiple AI agents in the cloud

  3. Mastercard Is Giving AI Agents Virtual Cards to Handle Your Shopping

  4. UN turns to Google to make its global data ready for AI agents

  5. Plugin4Shell – Zero Click RCE Vulnerability found in top four coding agents

  6. The fix for rogue AI agents could be more AI

Sources

The original report was published by Hacker News. WorldPing does not claim that reporting — this page summarises and contextualises it.

Read the full report at Hacker News

Related WorldPing coverage

TechCrunch
WorldPing
TechCrunch

The fix for rogue AI agents could be more AI

As companies hand off longer and more complex tasks to AI agents, they are running into an oversight problem: Agents can act faster, longer, and at greater volume than humans can realistically review.

Brief by WorldPing · Original reporting by TechCrunch

Hacker News
WorldPing
Hacker News

Launch HN: Skillsync (YC W26) – AI chat sessions made portable across agents

Hey HN, we're Nars & Nishant, founders of Skillsync ( https://skillsync.com ) Skillsync lets you move your AI chats across every coding agent. Most of our work exists as conversations, which are currently scattered across our agents.

Brief by WorldPing · Original reporting by Hacker News